docs / access · proving who
Authentication
Signing in proves who you are once. After that, each device and VM connects with a short-lived ticket, so a lost laptop or a finished VM stops working on its own.
Mod decides
- You sign in with Google. Mod issues each device its own ticket to sync.
- Tickets expire and are refreshed in the background. Nothing long-lived sits on a VM.
- Credentials for connected services are never in a document, a release or the log.
- If you lose every device, a passkey gets you back in. soon
You decide
- Which devices stay signed in.
- Which services you connect, and when to disconnect them.